project

Play App Signing

Google Play service in which Play holds the key that signs distributed Android apps, stripping the developer's upload signature and applying its own so a lost developer key cannot block updates.

Known aliases

Google Play App Signing

Relationships

No evidence-backed relationships are recorded.

Current clusters

build1 publisher

Opting into quantum-ready Play signing invalidates the SHA-1 in your Android OAuth client

A developer's Play-delivered build returned nothing at all from Sign in with Google, because the fingerprint buttons on Play Console's app signing page no longer describe the certificate that signs the app.

Publishers:dev.to

Reality

Evidence45
Adoption12
Hype gap+12
Incentives25
Confidence50